Toss Payments

io.github.groove79Published by GitHub account groove79v0.2.0Updated Oct 24, 2026

Toss Payments MCP: payment lookup, approval-gated cancel/refund, settlements. 토스페이먼츠 MCP.

The publisher's own server: Payments Ai Mcp

VerifiedSTDIODesktop onlyFinanceBusiness & Commerce

Overview

AI-generated overview

Local MCP server for Toss Payments that lets an assistant look up payments, list transactions and settlements, and cancel or refund with human approval.

What you can do
  • Look up a single payment by paymentKey or orderId, including status, amount, balance, method, cancel history and receipt URL
  • List approved and cancelled transactions over a date range, up to 5000 records with cursor paging
  • Read settlement records with fees, VAT and payout amounts, by sales or payout date, with totals
  • Cancel or partially cancel a payment, with an automatic Idempotency-Key and a preview/confirm step or phone approval before it runs
When to use it
Useful when you work with Toss Payments in Korea and want an assistant to check payment status, reconcile transactions or review settlements, and to handle refunds under a human approval gate rather than by hand.
Requirements
Runs locally via npx as an npm package (Node.js). Requires a Toss Payments secret key in TOSS_SECRET_KEY, starting with test_sk_ for sandbox data or live_sk_ for real payments. Optional OKAGENT_API_KEY enables phone approval via KakaoTalk; KMCP_WRITE_MODE sets approval, confirm or direct behavior.
Before you install
toss_cancel_payment moves real money and is irreversible; with a live_sk_ key it affects real payments. The server holds a payment secret key, and the optional OKAGENT_API_KEY sends approval requests to a third-party service. KMCP_WRITE_MODE=direct disables the confirmation check, so use it only for scripts you fully trust.

Installation

In SourceWeft

  1. Open Toss Payments in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

@appmonster/mcp-toss-payments

MCP server for Toss Payments (토스페이먼츠) core API. An agent can look up a payment, reconcile transactions, read settlements — and cancel/refund, which is the one tool that moves real money and is built to run behind a human approval (OK Agent).

토스페이먼츠 MCP 서버 — 결제 조회, 거래 내역, 정산, 취소/환불(승인 게이트).

Tools

ToolAccessWhat it does
toss_get_paymentreadpaymentKey 또는 orderId로 결제 1건: 상태, 금액, 잔액, 수단, 취소 이력, 영수증 URL
toss_cancel_paymentwrite전체/부분 취소. 가상계좌는 환불계좌 필수. Idempotency-Key 자동 부여
toss_list_transactionsread기간별 거래(승인·취소) 목록, 최대 5000건, startingAfter 커서
toss_list_settlementsread정산 내역(수수료·부가세·지급액), 매출일/지급일 기준, 합계 포함

Setup

  1. https://developers.tosspayments.com → 내 개발정보 → API 키. 먼저 test_sk_…로 시작하세요 (테스트 결제 데이터로 동작).
  2. MCP client config:
json
{  "mcpServers": {    "toss-payments": {      "command": "npx",      "args": ["-y", "@appmonster/mcp-toss-payments"],      "env": { "TOSS_SECRET_KEY": "test_sk_…" }    }  }}

Human approval for cancels (strongly recommended with a live key)

json
"OKAGENT_API_KEY": "ok_…"

Without it, write tools still never run blind: the first call returns a preview and a confirm_token, and the agent re-calls only after you agree in the chat. With an OK Agent key (free, 200/month) the request goes to your phone instead — approve on KakaoTalk, with a log. KMCP_WRITE_MODE=direct turns the check off for scripts you fully trust.

With a live_sk_ key the server prints a warning at start if no approval hook is configured.

Safety notes

  • toss_cancel_payment is irreversible. The tool description tells the agent to call toss_get_payment first and check balanceAmount.
  • Every cancel carries an Idempotency-Key (UUID, or the caller's own key) so a retried call cannot refund twice. Keys are valid 15 days on Toss's side.
  • Test-key servers tag every tool description with [TEST KEY — sandbox data] so the agent never mistakes sandbox numbers for real revenue.

Development

bash
pnpm --filter @appmonster/mcp-toss-payments test

Source: packages/toss-payments/README.md at commit 53af4ba

Tools

0
SourceWeft started this package once in an isolated sandbox, without credentials, to list its tools. That failed: the server did not start.

Version history

1
  1. v0.2.0LatestOct 23, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

Other Payments integrations